CN117675383A - Data transmission architecture and data transmission method for networked collaborative design - Google Patents

Data transmission architecture and data transmission method for networked collaborative design Download PDF

Info

Publication number
CN117675383A
CN117675383A CN202311691107.0A CN202311691107A CN117675383A CN 117675383 A CN117675383 A CN 117675383A CN 202311691107 A CN202311691107 A CN 202311691107A CN 117675383 A CN117675383 A CN 117675383A
Authority
CN
China
Prior art keywords
file
data
user
control module
access control
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202311691107.0A
Other languages
Chinese (zh)
Inventor
黄光亮
牟明
周振兴
邹举鹏
张再峰
赵孝诚
于泳
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Avic Airborne System General Technology Co ltd
Original Assignee
Avic Airborne System General Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Avic Airborne System General Technology Co ltd filed Critical Avic Airborne System General Technology Co ltd
Priority to CN202311691107.0A priority Critical patent/CN117675383A/en
Publication of CN117675383A publication Critical patent/CN117675383A/en
Pending legal-status Critical Current

Links

Abstract

The invention relates to the technical neighborhood of data transmission, and discloses a data transmission architecture and a data transmission method for networked collaborative design, wherein the architecture comprises a blockchain platform and an access control module, wherein the blockchain platform comprises an IPFS system and a blockchain system, and the IPFS system is used for storing original files and generating file hash digests; the block chain system is used for storing file hash abstract ciphertext; the block chain system is deployed with an intelligent contract, and after being authenticated by the access control module, the intelligent contract is triggered to acquire a file hash digest ciphertext; after decrypting the obtained file hash digest ciphertext, submitting the file hash digest plaintext obtained from the blockchain system to the IPFS system to obtain an original file; and the access control module is used for controlling the use authority of the data and encrypting and decrypting the file hash abstract. Aiming at the problems of trusted data storage and transmission in the networked collaborative design process, the invention utilizes the characteristic that the blockchain and the IPFS system are not falsified, and the corresponding encrypted hash abstract is stored in the blockchain system, thereby reducing the risk of centralized data storage and enhancing the safety of data.

Description

Data transmission architecture and data transmission method for networked collaborative design
Technical Field
The invention relates to the technical field of data transmission, in particular to a data transmission architecture and a data transmission method aiming at networking collaborative design.
Background
The evolution of the industrial Internet, cloud computing and other technologies promotes the development of a networked collaborative production mode, and forms a collaborative design, collaborative manufacturing, collaborative supply chain and other production and management systems. The continuously mature collaboration tools or platforms provide technical support for networked collaboration, so that collaboration among different enterprises in the industry is possible. The collaborative design is a key link, and the generated data is a core asset of an enterprise, and has the characteristics of high value, high confidentiality, unique enterprise and the like.
There is a great deal of data sharing and interaction among enterprises participating in the networked collaborative design, which brings new challenges to the protection of enterprise core data. How to ensure that the data is not maliciously destroyed and tampered in the collaborative design process, the record of the data operation is true and reliable and can be traced in the whole course, thereby protecting the core data asset and intellectual property of each enterprise and directly influencing the networking collaborative willingness and the research and development design efficiency. Therefore, a data transmission method suitable for the network collaborative design is needed.
Disclosure of Invention
Aiming at the defects in the prior art, the invention provides a data transmission architecture and a data transmission method aiming at networked collaborative design, so as to solve the problem that the existing data cannot be guaranteed not to be maliciously damaged and tampered when the system is designed.
In a first aspect, the present invention provides a data transmission architecture, comprising a blockchain platform and an access control module,
the blockchain platform includes an IPFS system and a blockchain system,
the IPFS system is used for storing an original file and generating a file hash abstract;
the block chain system is used for storing file hash abstract ciphertext; the block chain system is provided with an intelligent contract, and after being authenticated by the access control module, the intelligent contract is triggered to obtain a file hash digest ciphertext; after decrypting the obtained file hash digest ciphertext, submitting the file hash digest plaintext obtained from the blockchain system to the IPFS system to obtain an original file;
the access control module is used for controlling the use authority of the data and encrypting and decrypting the file hash abstract.
According to the technical scheme, the data transmission architecture provided by the invention utilizes the blockchain technology to store and manage the files, and the access right conditions are set for the data through the intelligent contracts, so that the credibility and reliability of the data storage can be ensured.
Optionally, the system further comprises a blockchain service system, wherein the blockchain service system is used for connecting a file owner with the IPFS system and connecting a file user with the IPFS system and the blockchain platform.
Optionally, the smart contract includes:
a data storage certificate contract, which generates a data storage certificate according to a file hash abstract for storing data to be transmitted and writing the file hash abstract into a blockchain;
a data sharing contract for defining an address or a user who has access to the data, and an access right;
a data downloading contract for acquiring an original file from the IPFS system according to the file hash abstract;
a data query contract for querying the hash abstract of the file according to the input information;
and the data tracing contract is used for recording the change history of the original file so as to trace the modification of the data item and the timestamp operator.
Optionally, the file hash digest generates a transaction specific identifier upon uploading to the blockchain system, and the file user obtains transaction information based on the specific identifier, the transaction information being associated with the original file.
Optionally, the file user requests authorization from the file owner to obtain the original file, the authorization information including the file owner user identity ID, the transaction specific identifier, the file hash digest, and the file owner user public key.
Optionally, the original file adopts a fragmentation storage mode, and when the original file is uploaded to the IPFS system, data hash digests are respectively generated according to fragments.
Optionally, the access control module adopts a certificate-free cryptosystem to encrypt and decrypt file hashes; the certificateless cryptosystem includes:
the access control module initializes: the parameter lambda is input at the input end of the access control module, the master key SK and the access control module parameter K are output at the output end,
secret value generation: the parameter K and the user identity ID are input at the input of the access control module, the user secret value X is output at the output,
partial private key generation: the parameter K, the access control module master key SK and the user identity ID are input at the input end of the access control module, the user part private key PSK is output at the output end,
generating a user private key: the parameter K, the user part private key PSK and the secret value X are input at the input end of the access control module, the user private key SK is output at the output end,
generating a public key of a user: the parameter K and the secret value X of the user are input at the input end of the access control module, the public key of the user is output at the output end,
signature: the access control module inputs the signed message Info, the user's identity information ID and the user's private key PK, outputs a signature at the output,
and (3) verification: the message, signature, access control module public parameters, signer public key and identity information are input at the access control module input, if the signature is true, a is output at the output, otherwise B is output at the output,
in a second aspect, the present invention provides a data transmission method, based on a data transmission architecture of any one of possible implementation manners of the first aspect, including:
the access control module encrypts the file stored in the IPFS system by the file owner in a hash digest plaintext manner, and the encrypted file hash digest ciphertext is stored in the blockchain system;
the file user obtains transaction information on the blockchain system and requests authorization information from the file owner;
the access control module authenticates authorization information obtained by a file user and triggers the blockchain system to download the intelligent contract;
the block chain system returns file hash digest ciphertext according to the intelligent contract, and sends the file hash digest ciphertext to a file user after decryption by the access control module;
and uploading the file hash abstract clear text to the IPFS system by the file user, and downloading the original file.
By adopting the technical scheme, the application has the following beneficial effects:
aiming at the problems of trusted data storage and transmission in the networked collaborative design process, the invention provides a data safe storage and transmission scheme for a blockchain, and the characteristics of incapability of being falsified by the blockchain and an IPFS are utilized, original files are stored in the IPFS, corresponding encrypted hash digests are stored in the blockchain, so that the risk of centralized data storage is reduced, and the safety of the data is enhanced.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below. Like elements or portions are generally identified by like reference numerals throughout the several figures. In the drawings, elements or portions thereof are not necessarily drawn to scale.
Fig. 1 shows a schematic diagram of a data transmission framework for networked collaborative design according to an embodiment of the present invention;
FIG. 2 is a schematic diagram of a blockchain service system provided by an embodiment of the present invention;
fig. 3 shows a flowchart of a data transmission method for networked collaborative design according to an embodiment of the present invention.
Detailed Description
Embodiments of the technical scheme of the present invention will be described in detail below with reference to the accompanying drawings. The following examples are only for more clearly illustrating the technical aspects of the present invention, and thus are merely examples, which should not be construed as limiting the scope of the present invention.
It is noted that unless otherwise indicated, technical or scientific terms used herein should be given the ordinary meaning as understood by one of ordinary skill in the art to which this invention pertains.
In one embodiment of the present invention, as shown in FIG. 1, a data transmission architecture is disclosed, comprising a blockchain platform and an access control module, wherein the blockchain platform comprises an IPFS system and a blockchain system, the IPFS system is used for storing an original file and generating a file hash digest; the block chain system is used for storing file hash abstract ciphertext; after decrypting the obtained file hash digest ciphertext, submitting the file hash digest plaintext obtained from the blockchain system to the IPFS system to obtain an original file; the access control module is used for controlling the use authority of the data and encrypting and decrypting the file hash abstract.
The original file generated by the networked collaborative design provides data storage service by using the IPFS system service cluster, saves block chain resources and stores huge design data off-chain. The blockchain system provides a decentralized blockchain infrastructure. The block chain technology is utilized to store and manage the files, and the access right conditions are set for the data through the intelligent contracts, so that the credibility and reliability of the data storage can be ensured.
The interplanetary file system (InterPlanetary File System, IPS) is a network transport protocol that aims to create persistent and distributed storage and sharing files. The data files are transferred between the file owner and the file user based on the IPFS system and the blockchain system. The IPFS system and the blockchain system are combined to realize uplink storage of the data abstract and downlink storage of the data main body, so that the defect of large data storage of the blockchain is overcome.
As shown in FIG. 2, the system further comprises a blockchain service system for connecting the file owner with the IPFS system and for connecting the file user with the IPFS system and the blockchain platform. The blockchain service system is a middle layer for connecting a user with bottom layer basic resources such as bottom layer data storage and blockchain, and the like, longitudinally provides functions such as data uplink, downlink, inquiry and certificate storage for the user, simultaneously provides an intelligent contract arrangement function, transversely provides service interfaces such as certificate storage, sharing and record tracing for an application system in a RESTful API form, and realizes seamless connection of application system data to the blockchain.
The blockchain service system comprises an application layer, wherein the application layer provides blockchain related system services for users, including data storage, data inquiry, data downloading, data uplink/certification and access authentication.
And (3) data storage: the data distributed storage function is provided, the data owner is helped to store the data into the IPFS system, and after the IPFS system completes the slicing storage of the data, a file hash abstract is generated according to the data and returned to the file owner. After the file owner confirms that the data storage operation is carried out, the access control module encrypts the hash value of the file abstract and uploads the encrypted data to the blockchain system.
And (3) data query: and providing an on-chain data query function, triggering and querying the intelligent contract by authorizing the user to meet the authentication condition according to the admission mechanism requirement of the blockchain, inputting the transaction specific identifier of the data transaction, and acquiring the file hash digest ciphertext of the transaction from the blockchain system. The file hash digest is uploaded to the blockchain system to generate a transaction specific identifier, and the file user obtains transaction information based on the specific identifier, wherein the transaction information is associated with the original file.
Data chaining/evidence-saving: the data uploading function is provided, and the file owner is helped to realize the data certification. The process is that a file owner initiates a data uplink intelligent contract, and writes a file hash abstract of a networked design data set into a blockchain transaction uplink. After the transaction is linked, a transaction specific identifier is generated, when data is required to be circulated or shared, the identifier is authorized by a specific user, and an authorized user can obtain transaction information through the identifier to authenticate or obtain the data.
Access authentication: the system provides the access control and management functions of the user on the data, performs encryption and decryption of data hash through a certificate-free encryption mechanism, controls the use authority of the data, ensures the safety and confidentiality of the data, and avoids illegal use of the data.
The blockchain service system also comprises an interaction layer, wherein the interaction layer is connected with the uploading application layer and the blockchain platform to provide corresponding APIs and SDKs. The method is mainly responsible for calling, interacting and transmitting information of application of an application layer to a bottom layer resource, and simultaneously provides an API interface for interfacing with an application system.
The intelligent contracts are developed and deployed according to business requirements, and the intelligent contracts deployed in the embodiment comprise a data storage contract, a data sharing contract, a data downloading contract, a data query contract and a data tracing contract. The intelligent contract defines data, records, user structure variables, key information for storing data files, key information for slicing data files, user data and affiliations of data files. Intelligent contracts are written based on the structure variables. The smart contract according to the present embodiment includes:
the data storage certificate contract generates a data storage certificate according to the file hash abstract of the data to be transmitted and writes the file hash abstract into the blockchain; the user submits the data, the contract calculates the hash value of the data and writes it into the blockchain, generating an unalterable data certificate. For storing hash values and metadata of data onto a blockchain, ensuring the integrity and non-tamper-resistance of the data.
The data sharing contract is used for defining addresses or users with the right to access the data and the access authority; the data sharing contract defines data sharing rules including which addresses or users have access to the data, and the level of rights to the access. The file owner is allowed to define and control the sharing rule of the data, and safe data sharing is realized.
The data downloading contract is used for acquiring an original file from the IPFS system according to the file hash abstract; and acquiring a corresponding original file from the IPFS system through the data content hash value. The corresponding input is a data content hash value and the output is data of the file type.
The data inquiry contract inquires the hash abstract of the file according to the input information; and querying the blockchain system according to the information of the file owner to obtain the file hash abstract. The input is file owner information and the output is a file hash digest of the data.
The data trace back contract is used for recording the change history of the original file so as to trace back the modification of the data item and the timestamp operator. Ensure the transparency and integrity of data and provide a tamper-proof data record.
Optionally, the file user requests authorization from the file owner to obtain the original file, the authorization information including the file owner user identity ID, the transaction specific identifier, the file hash digest, and the file owner user public key.
In one possible implementation, the original file adopts a slicing storage mode, and when the original file is uploaded to the IPFS system, data hash digests are respectively generated according to slices and stored in different nodes. When the file user downloads the file, the data fragments of each node are acquired through the file hash abstract and are combined into a complete original file. And when the data is downloaded, the data is read from different nodes at the same time, and the efficiency of data storage is improved by utilizing the performances of a plurality of nodes.
In this embodiment, the access control module uses a certificateless cryptosystem to encrypt and decrypt the file hash, and the certificateless cryptosystem designs the signer a, the verifier B and the key generation center KGC. The public key certificate mechanism and the key escrow are not needed, the key generation center binds with the identity of the user and generates a public-private key pair, and the key generation center cannot know the private key of any user; the certificateless cryptosystem specifically includes:
initializing a system: the parameter lambda is input at the system input, the master key SK and the system parameter K are output at the output,
secret value generation: the parameter K and the user identity ID are input at the system input, the user secret value X is output at the output,
partial private key generation: the parameter K, the system master key SK and the user identity ID are input at the input end of the system, the user part private key PSK is output at the output end,
generating a user private key: the parameter K, the user part private key PSK and the secret value X are input at the input end of the system, the user private key SK is output at the output end,
generating a public key of a user: the parameter K and the secret value X of the user are input at the input of the system, the public key of the user is output at the output,
signature: the information Info of the substitute signature, the identity information ID of the user and the private key PK of the user are input at the input end of the system, a signature is output at the output end,
and (3) verification: the message, signature, system public parameters, signer public key and identity information are input at the system input, if the signature is true, a is output at the output, otherwise B is output at the output,
in one embodiment of the present invention, as shown in fig. 3, a data transmission method is provided, which includes:
s1, encrypting a hash digest plaintext of a file stored in an IPFS system by an access control module, and storing the encrypted file hash digest ciphertext in a blockchain system;
s2, the file user obtains transaction information on the blockchain system and requests authorization information from the file owner;
s3, the access control module authenticates authorization information obtained by a file user and triggers the blockchain system to download the intelligent contract;
s4, returning a file hash digest ciphertext by the blockchain system according to the intelligent contract, decrypting by the access control module, and then sending the file hash digest plaintext to a file user;
s5, uploading the file hash abstract clear text to the IPFS by the file user, and downloading the original file.
Aiming at the problem of trusted data storage and transmission in the networked collaborative design process, the embodiment provides a data safe storage and transmission scheme based on a blockchain, and the characteristics that the blockchain and an IPFS system cannot be tampered are utilized, original files are stored in the IPFS, corresponding encrypted hash digests are stored in the blockchain system, so that the risk of centralized data storage is reduced, and the safety of the data is enhanced.
The foregoing embodiments are only used for describing the technical solutions of the present application in detail, but the descriptions of the foregoing embodiments are only used for helping to understand the methods of the embodiments of the present invention, and should not be construed as limiting the embodiments of the present invention. Variations or alternatives readily apparent to those skilled in the art are intended to be encompassed within the scope of the embodiments of the present invention.

Claims (8)

1. A data transmission architecture for networked collaborative design is characterized by comprising a blockchain platform and an access control module,
the blockchain platform includes an IPFS system and a blockchain system,
the IPFS system is used for storing an original file and generating a file hash abstract;
the block chain system is used for storing file hash abstract ciphertext; the block chain system is provided with an intelligent contract, and after being authenticated by the access control module, the intelligent contract is triggered to obtain a file hash digest ciphertext; after decrypting the obtained file hash digest ciphertext, submitting the file hash digest plaintext obtained from the blockchain system to the IPFS system to obtain an original file;
the access control module is used for controlling the use authority of the data and encrypting and decrypting the file hash abstract.
2. The data transmission architecture of claim 1, further comprising a blockchain service system for connecting a file owner with the IPFS system and connecting a file user with the IPFS system and the blockchain platform.
3. The data transmission architecture of claim 2, wherein the smart contract comprises:
a data storage certificate contract, which generates a data storage certificate according to a file hash abstract for storing data to be transmitted and writing the file hash abstract into a blockchain;
a data sharing contract for defining an address or a user who has access to the data, and an access right;
a data downloading contract for acquiring an original file from the IPFS system according to the file hash abstract;
a data query contract for querying the hash abstract of the file according to the input information;
and the data tracing contract is used for recording the change history of the original file so as to trace the modification of the data item and the timestamp operator.
4. The data transmission architecture of claim 2, wherein the file hash digest, upon uploading to the blockchain system, generates a transaction-specific identifier, and the file user obtains transaction information based on the specific identifier, the transaction information being associated with the original file.
5. The data transmission architecture of claim 4 wherein the file user requests authorization from the file owner to obtain the original file, the authorization information including the file owner user ID, the transaction specific identifier, the file hash digest, and the file owner user public key.
6. The data transmission architecture of claim 5, wherein the original file is stored in a sliced manner, and the data hash digests are generated according to slices when the original file is uploaded to the IPFS system.
7. The data transmission architecture of claim 5, wherein the access control module employs a certificateless cryptosystem to encrypt and decrypt file hashes; the certificateless cryptosystem includes:
the access control module initializes: the parameter lambda is input at the input end of the access control module, the master key SK and the access control module parameter K are output at the output end,
secret value generation: the parameter K and the user identity ID are input at the input of the access control module, the user secret value X is output at the output,
partial private key generation: the parameter K, the access control module master key SK and the user identity ID are input at the input end of the access control module, and the private key of the user part is output at the output endPSK,
Generating a user private key: the parameter K, the user part private key PSK and the secret value X are input at the input end of the access control module, the user private key SK is output at the output end,
generating a public key of a user: the parameter K and the secret value X of the user are input at the input end of the access control module, the public key of the user is output at the output end,
signature: the access control module inputs the signed message Info, the user's identity information ID and the user's private key PK, outputs a signature at the output,
and (3) verification: the message, signature, access control module public parameters, signer public key and identity information are input at the access control module input, if the signature is true, a is output at the output, otherwise B is output at the output,
8. a data transmission method, characterized in that it is based on the data transmission architecture of any one of claims 1-7, comprising:
the access control module encrypts the file stored in the IPFS system by the file owner in a hash digest plaintext manner, and the encrypted file hash digest ciphertext is stored in the blockchain system;
the file user obtains transaction information on the blockchain system and requests authorization information from the file owner;
the access control module authenticates authorization information obtained by a file user and triggers the blockchain system to download the intelligent contract;
the block chain system returns file hash digest ciphertext according to the intelligent contract, and sends the file hash digest ciphertext to a file user after decryption by the access control module;
and uploading the file hash abstract clear text to the IPFS system by the file user, and downloading the original file.
CN202311691107.0A 2023-12-11 2023-12-11 Data transmission architecture and data transmission method for networked collaborative design Pending CN117675383A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202311691107.0A CN117675383A (en) 2023-12-11 2023-12-11 Data transmission architecture and data transmission method for networked collaborative design

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202311691107.0A CN117675383A (en) 2023-12-11 2023-12-11 Data transmission architecture and data transmission method for networked collaborative design

Publications (1)

Publication Number Publication Date
CN117675383A true CN117675383A (en) 2024-03-08

Family

ID=90076854

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202311691107.0A Pending CN117675383A (en) 2023-12-11 2023-12-11 Data transmission architecture and data transmission method for networked collaborative design

Country Status (1)

Country Link
CN (1) CN117675383A (en)

Similar Documents

Publication Publication Date Title
CN109829326B (en) Cross-domain authentication and fair audit de-duplication cloud storage system based on block chain
US10673626B2 (en) Threshold secret share authentication proof and secure blockchain voting with hardware security modules
CN110933108B (en) Data processing method and device based on block chain network, electronic equipment and storage medium
US11159307B2 (en) Ad-hoc trusted groups on a blockchain
US10432394B2 (en) Method and system for sharing encrypted content
Yan et al. Heterogeneous data storage management with deduplication in cloud computing
US9209972B2 (en) Mediator device monitoring and controlling access to electronic content
US8788811B2 (en) Server-side key generation for non-token clients
US9137017B2 (en) Key recovery mechanism
JP2020528224A (en) Secure execution of smart contract operations in a reliable execution environment
US20110296171A1 (en) Key recovery mechanism
US20120173885A1 (en) Key management using trusted platform modules
US8806206B2 (en) Cooperation method and system of hardware secure units, and application device
US7266705B2 (en) Secure transmission of data within a distributed computer system
Oktian et al. BorderChain: Blockchain-based access control framework for the Internet of Things endpoint
US20210250183A1 (en) Method and apparatus for performing multi-party secure computing based-on issuing certificate
CN114329529A (en) Asset data management method and system based on block chain
WO2014114080A1 (en) Method and system for data encryption protection
US20220058283A1 (en) Digital Storage and Data Transport System
WO2021154157A1 (en) Blockchain-based data exchange
CN113645039A (en) Communication information transmission system and method based on different authorities
CN115906117A (en) Trusted application implementation method based on blockchain transaction
CN117675383A (en) Data transmission architecture and data transmission method for networked collaborative design
US11770263B1 (en) Systems and methods for enforcing cryptographically secure actions in public, non-permissioned blockchains using bifurcated self-executing programs comprising shared digital signature requirements
Aziz et al. Assured data deletion in cloud computing: security analysis and requirements

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination